Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3233362e302f32322d3233203d3e203232333638.roa
File:                     3138362e3138332e3233362e302f32322d3233203d3e203232333638.roa (raw, json)
Hash identifier:          ex4YHzAjQfaaVDCbSwwyceb+akmNJz2U3/C6bAxYaIY=
Subject key identifier:   64:5B:49:DD:EF:F2:56:14:1B:67:87:24:02:23:06:F7:08:F2:DC:CF
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       1E0DD581AD9AF1A6DDE8A7F7831E0F40DB533929
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3233362e302f32322d3233203d3e203232333638.roa
Signing time:             Tue 04 Feb 2025 18:22:19 +0000
ROA not before:           Tue 04 Feb 2025 18:17:19 +0000
ROA not after:            Tue 03 Feb 2026 18:22:19 +0000
asID:                     22368
IP address blocks:        186.183.236.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0d:d5:81:ad:9a:f1:a6:dd:e8:a7:f7:83:1e:0f:40:db:53:39:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Feb  4 18:17:19 2025 GMT
            Not After : Feb  3 18:22:19 2026 GMT
        Subject: CN=645B49DDEFF256141B678724022306F708F2DCCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:61:ae:16:59:44:32:58:0d:24:95:f7:59:a5:
                    50:86:95:de:8a:96:be:75:fb:fb:ff:ce:55:85:b3:
                    2d:1b:fe:b2:02:4a:6a:cd:cd:02:20:5e:dc:1c:17:
                    3f:8b:a1:11:0f:dd:e5:d3:69:03:a6:1a:6a:ae:d8:
                    b5:39:d5:e8:15:18:23:04:b8:d1:33:de:56:e7:b4:
                    8a:ba:78:3c:e5:0c:c3:55:45:df:5b:43:de:78:33:
                    49:da:53:fd:fa:8e:c7:0d:c4:57:96:fc:d2:d8:41:
                    a4:d3:c3:53:bf:83:1e:a0:e1:7d:0d:81:99:62:2b:
                    d2:c1:91:48:74:e9:7d:06:a5:d3:b2:19:e6:78:60:
                    6c:dd:d0:3d:b1:45:76:b7:4d:86:a0:c5:14:63:56:
                    6f:2c:ef:80:d8:96:6f:04:b8:5b:63:79:08:03:8d:
                    7f:8e:04:ba:fa:02:36:6e:06:e7:87:46:8e:61:8e:
                    f2:46:25:0f:f7:77:2f:0b:5c:8f:e8:21:6c:07:6e:
                    3c:84:b1:bd:df:71:2f:11:92:38:93:3d:6d:dd:41:
                    67:18:e5:dd:60:90:87:b2:20:7a:88:a2:3d:60:b4:
                    57:76:47:db:7d:4d:36:9c:7f:ad:91:f3:fa:f0:93:
                    fd:81:4b:64:96:35:b1:25:84:8d:8c:82:3c:49:f8:
                    28:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5B:49:DD:EF:F2:56:14:1B:67:87:24:02:23:06:F7:08:F2:DC:CF
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138362e3138332e3233362e302f32322d3233203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:35:5b:4f:74:36:56:54:c7:25:ec:d9:26:fb:71:2c:a8:87:
         b9:ae:3b:c2:53:be:cc:f0:5f:39:dd:b2:17:87:88:1e:3c:8a:
         8f:a0:d9:ce:1c:ab:68:49:4e:d8:62:84:45:dd:a0:64:a3:fc:
         48:33:ac:bf:3a:0f:11:1f:bb:c5:30:e0:e2:e8:e0:34:93:9b:
         39:d2:32:4e:c0:1f:ba:ad:0c:d6:15:c2:be:54:3b:c8:d8:c1:
         ed:dc:f6:68:c8:3f:72:32:96:6d:87:43:a8:53:e1:60:e4:2a:
         c4:4c:11:45:1c:07:3c:2d:48:d0:ef:e1:2b:f6:75:41:aa:4d:
         ae:9c:09:79:71:b6:f0:fd:04:43:bb:f4:27:e1:9a:65:7f:67:
         46:a9:32:e1:e7:28:d1:74:de:a8:fe:36:07:dd:a1:d0:b9:9f:
         56:ee:dc:ec:d7:5c:1e:00:ee:cb:a5:40:09:ce:72:c9:99:68:
         9b:a8:3e:28:dd:95:4b:67:18:1d:1c:4f:60:17:0d:76:94:b3:
         43:a4:cb:6b:34:b3:04:bc:33:65:49:9e:66:48:92:2f:1c:2f:
         a3:5e:41:e3:91:b9:da:fa:c5:21:13:45:41:5f:86:26:d5:66:
         fa:78:4c:03:52:69:e3:b5:cc:11:2e:e0:91:24:82:fc:b2:ef:
         c8:8f:fb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:51 2025 by rpki-client